Divested-WRT: No-nonsense hardened builds for Linksys WRT series

sunchar · 2021-12-10T22:37:58.158Z

Hi!

Somebody knows why happened this?

 make[3] -C package/libs/libselinux compile
    ERROR: package/feeds/packages/glib2 failed to build.
 make[3] -C feeds/packages/libs/avahi compile
 make[3] -C feeds/packages/libs/avahi compile
make -r world: build failed. Please re-run make with -j1 V=s or V=sc for a higher verbosity level to see what's going on
make: *** [/home/carlos/openwrt/include/toplevel.mk:230: world] Error 1
carlos@carlos:~/openwrt$

Thanks!

RuralRoots · 2021-12-11T03:39:55.324Z

sunchar:

make -r world: build failed. Please re-run make with -j1 V=s or V=sc for a higher verbosity level to see what's going on

Do what it says.
make V=sc

sunchar · 2021-12-11T03:47:26.017Z

I did, but it did not failed anymore.

Thanks!

pesa1234 · 2021-12-11T10:24:00.438Z

Hi, how to divide? 4 DHCP server and 4 different net?

d4niel_p · 2021-12-14T23:09:49.253Z

If I understand correctly, there is no way to whitelist a page at this moment, yes?

BTW: for some reason your default list completely cuts access to Feedly.

SkewedZeppelin · 2021-12-14T23:57:33.465Z

whitelist a page at this moment

indeed, you can /etc/init.d/divblock disable and opkg install luci-app-adblock if needed

feedly

One of the sources in the list was wrongly blocking it and many other sites.
I've since dropped this list as it has degraded in quality.
Any other hosts that are wrongly blocked feel free to comment, pm, or email me with a throwaway and I'll add it to the exclusions.
a service divblock restart will get you the latest list.

d4niel_p · 2021-12-15T10:12:38.482Z

SkewedZeppelin:

indeed, you can /etc/init.d/divblock disable and opkg install luci-app-adblock if needed

Nah, I like divblock idea for it's simplicity, especially that I can easily use list hosted by myself, whitelist is the only missing feature.
And yes, I'm fully aware that I want additional features and prize simplicity in the same statement.

Thanks for all your work on divested builds, radios are much more stable than on vanilla.

Traveler · 2021-12-16T00:17:18.725Z

Hi got solution why i cant log on Luci

github.com/openwrt/luci

Can't login via luci web interface after upgrading to newest 21.02-rc

opened 05:25PM - 24 Jun 21 UTC

closed 03:34PM - 30 Jun 21 UTC

msmafra

Can't login via LUCI, but still working via ssh. No error is shown in the web in…terface, but in the logs. ``` ❯ cat /etc/os-release NAME="OpenWrt" VERSION="21.02.0-rc3" ID="openwrt" ID_LIKE="lede openwrt" PRETTY_NAME="OpenWrt 21.02.0-rc3" VERSION_ID="21.02.0-rc3" HOME_URL="https://openwrt.org/" BUG_URL="https://bugs.openwrt.org/" SUPPORT_URL="https://forum.openwrt.org/" BUILD_ID="r16172-2aba3e9784" OPENWRT_BOARD="ramips/mt7620" OPENWRT_ARCH="mipsel_24kc" OPENWRT_TAINTS="" OPENWRT_DEVICE_MANUFACTURER="OpenWrt" OPENWRT_DEVICE_MANUFACTURER_URL="https://openwrt.org/" OPENWRT_DEVICE_PRODUCT="Generic" OPENWRT_DEVICE_REVISION="v0" OPENWRT_RELEASE="OpenWrt 21.02.0-rc3 r16172-2aba3e9784" ❯ pkg list-installed | grep luci liblucihttp-lua - 2021-06-11-3dc89af4-1 liblucihttp0 - 2021-06-11-3dc89af4-1 luci - git-20.074.84698-ead5e81 luci-app-firewall - git-21.163.62626-9660eed luci-app-opkg - git-21.079.58598-6639e31 luci-base - git-21.163.64918-ba57ec5 luci-lib-base - git-20.232.39649-1f6dc29 luci-lib-ip - git-20.250.76529-62505bd luci-lib-jsonc - git-19.317.29469-8da8f38 luci-lib-nixio - git-20.234.06894-c4a4e43 luci-mod-admin-full - git-19.253.48496-3f93650 luci-mod-network - git-21.165.25599-2778366 luci-mod-status - git-21.163.64918-6c6559a luci-mod-system - git-21.163.64918-ca66b63 luci-proto-ipv6 - git-21.148.49484-14511e5 luci-proto-ppp - git-21.163.64918-6c6559a luci-ssl - git-20.244.36115-e10f954 luci-theme-bootstrap - git-21.164.71418-bd36169 rpcd-mod-luci - 20210614 ❯ ps ww | grep rpcd 957 root 2112 S /sbin/rpcd -s /var/run/ubus/ubus.sock -t 30 2858 root 1252 S grep rpcd ❯ lua -lluci.util -lubus -e 'luci.util.dumptable(ubus.connect():c all("system", "board", {}))' board_name asus,rt-ac51u hostname nostromo release table: 0x172f470 distribution OpenWrt revision r16172-2aba3e9784 version 21.02.0-rc3 target ramips/mt7620 description OpenWrt 21.02.0-rc3 r16172-2aba3e9784 model Asus RT-AC51U kernel 5.4.124 system MediaTek MT7620A ver:2 eco:6 ❯ logread ... Thu Jun 24 14:22:26 2021 daemon.err uhttpd[2311]: luci: accepted login on / for root from 141.12.0.238 ... ```

Manually appending "admin" at the end of the URL so that it's

.../cgi-bin/luci/admin

will allow logging into the main Luci interface.

SkewedZeppelin · 2021-12-16T03:04:19.494Z

Latest build adds exclusion support to divblock.
There is a file that you simple put grep patterns in, one per line.
eg. if www.example.com is blocked you can:

nano /etc/config/divblock-exclusions
add a new line: /www\.example\.com/
ctrl+o to save, ctrl+x to exit
/etc/init.d/divblock restart to take effect

This is grep format, so one pattern per line, escape your periods with backslash, and have a forwardslash at start and finish to strictly match the domain and not any others.

d4niel_p · 2021-12-21T21:51:19.063Z

I cannot get divblock to work in latest builds, /etc/init.d/log restart returns:

udhcpc: started, v1.34.1
udhcpc: broadcasting discover
udhcpc: no lease, failing
Downloading 'https://divested.dev/hosts-dnsmasq'
Connecting to 107.161.22.194:443
Writing to stdout
                 100% |*******************************| 12713k  0:00:00 ETA
Download completed (13018407 bytes)

So far so good, but system log shows:

Tue Dec 21 22:36:21 2021 user.notice divblock: deleted
Tue Dec 21 22:36:21 2021 user.notice dnsmasq: DNS rebinding protection is active, will discard upstream RFC1918 responses!
Tue Dec 21 22:36:21 2021 user.notice dnsmasq: Allowing 127.0.0.0/8 responses
Tue Dec 21 22:36:24 2021 user.notice divblock: restarted dnsmasq
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq[1]: started, version 2.86 cachesize 150
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq[1]: compile time options: IPv6 GNU-getopt no-DBus UBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP no-conntrack no-ipset no-auth no-cryptohash no-DNSSEC no-ID loop-detect inotify dumpfile
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq[1]: UBus support enabled: connected to system bus
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq-dhcp[1]: DHCP, IP range 192.168.0.100 -- 192.168.0.249, lease time 12h
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq-dhcp[1]: DHCP, sockets bound exclusively to interface br-lan
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq[1]: using only locally-known addresses for test
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq[1]: using only locally-known addresses for onion
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq[1]: using only locally-known addresses for localhost
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq[1]: using only locally-known addresses for local
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq[1]: using only locally-known addresses for invalid
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq[1]: using only locally-known addresses for bind
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq[1]: using only locally-known addresses for lan
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq[1]: reading /tmp/resolv.conf.d/resolv.conf.auto
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq[1]: using nameserver 1.1.1.1#53
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq[1]: using only locally-known addresses for test
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq[1]: using only locally-known addresses for onion
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq[1]: using only locally-known addresses for localhost
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq[1]: using only locally-known addresses for local
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq[1]: using only locally-known addresses for invalid
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq[1]: using only locally-known addresses for bind
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq[1]: using only locally-known addresses for lan
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq[1]: read /etc/hosts - 4 addresses
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq[1]: read /tmp/hosts/dhcp.cfg01411c - 5 addresses
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq[1]: read /tmp/hosts/odhcpd - 2 addresses
Tue Dec 21 22:36:24 2021 daemon.info dnsmasq-dhcp[1]: read /etc/ethers - 0 addresses
Tue Dec 21 22:36:40 2021 daemon.info dnsmasq-dhcp[1]: DHCPDISCOVER(br-lan) 192.168.0.151 [redacted mac]
Tue Dec 21 22:36:40 2021 daemon.info dnsmasq-dhcp[1]: DHCPOFFER(br-lan) 192.168.0.151 [redacted mac]
Tue Dec 21 22:36:40 2021 daemon.info dnsmasq-dhcp[1]: DHCPREQUEST(br-lan) 192.168.0.151 [redacted mac]
Tue Dec 21 22:36:40 2021 daemon.info dnsmasq-dhcp[1]: DHCPACK(br-lan) 192.168.0.151 [redacted mac]
Tue Dec 21 22:36:43 2021 user.notice divblock: failed to download

And tbh I have no idea what's the issue.

grzesiczek1 · 2022-01-02T10:49:58.916Z

My first post here but I’ve been following thread for a while. Moved from official 19.07 to divested build after the Linksys Wi-Fi dropouts patch was included and must admit - it checks all my points for what I need - thank you very much for providing it!

Just one question please re divblock-> would there be any log or counter where I can see divblock events/count for successful query/domain filtering? Just from the future troubleshooting perspective I’d like to know where the logs are so I can add exclusion if required.

larrynz · 2022-01-05T01:53:23.721Z

Hi can someone confirm which are the correct dsa multicpu patches needed for wrt1900acs and the wrt32x?
I've tried building from source the patches above but no dice (eth1).

RuralRoots · 2022-01-05T03:31:44.337Z

larrynz:

Hi can someone confirm which are the correct dsa multicpu patches needed for wrt1900acs and the wrt32x?
I've tried building from source the patches above but no dice (eth1).

IIRC it's been merged.

SkewedZeppelin:

New build is up with the fix thanks to @nbd and @cotequeiroz!

larrynz · 2022-01-05T03:47:27.957Z

I'm sure that

SkewedZeppelin:

New build is up with the fix thanks to @nbd and @cotequeiroz!

was the merging of the wireless cutout issues.

Anyhow @anomeome has replied

RuralRoots · 2022-01-05T04:21:32.590Z

My apologies, and I stand corrected. That was October for the DSA second cpu patch.

dmstb5 · 2022-01-08T22:07:50.730Z

Your video link is broken:

https://divested.dev/index.php?page=videos#openwrt-compile_quick_start

Captcha does not work.

SkewedZeppelin · 2022-01-09T00:32:21.558Z

@dmstb5

The link works just fine. Javascript is not required, but cookies are.

Traveler · 2022-01-09T08:42:41.631Z

Hi,

With previous build, samsung smart TV don't get internet connexion.

Using tv network diagnostic get IP get DNS working, but have error message ISP blocking.

I had stop divblock service and start addblock

Everything work now.

asl · 2022-01-09T11:54:30.664Z

The current set of lists seems to be very aggressive and bans lots of legitimate services, e.g.:

mail.ru (from https://raw.githubusercontent.com/omicron-b/custom-filters/master/domains_imported.txt)
login.vk.com / m.vk.com (from https://raw.githubusercontent.com/lightswitch05/hosts/master/docs/lists/tracking-aggressive-extended.txt)
23andme.com (from https://divested.dev/blocklists/Genealogy.txt)

And many others

digital_mystik · 2022-01-16T21:45:01.967Z

hello.. thought I'd post a "fix" for an issue with adding a guest network (multiple networks on the same radio) alongside another SSID for other WRT32X users (having both would cause the device to be inactive / would not associate), since I just found the pertinent bug report and workaround yesterday:

FS#3904 - Adding another SSID to a radio prevents the interface from starting due to duplicate BSSID

For the guest network entry, just need to write in a different macaddr from the other network on the same radio (used my main SSID address with the last number changed) in /etc/config/wireless with option macaddr *insert different address here*